| 摘要 |
Generation of linearly homomorphic structure-preserving signature à on a vector ( M 1 , ..., M n ) ˆˆ by computing, in a processor (120), using a signing key signature elements (z, r, u) by calculating z = ˆ� i = 1 n M i - Ç i , ˆ� i = 1 n M i - ³ i , u = ˆ� i = 1 n M i - ´ i , and outputting the signature à comprising the signature elements (z, r, u). The signature is verified by verifying, in a processor (220) that M 1 €¦ M n ‰ 1 G ^ €¦ 1 G ^ and that (z, r, u) satisfy the equalities 1 G T = e g z �¢ z ‹ e g r �¢ r ‹ ˆ� i = 1 n e g i �¢ M i , 1 G T = e h z �¢ z ‹ e h �¢ u ‹ ˆ� i = 1 n e h i �¢ M i ; and determing that the signature has been successfully verified in case the verifications are successful and that the signature has not been successfully verified otherwise. Also provided are a fully-fledged scheme and a context-hiding scheme. |
